Page Comparison

Follow the instructions guidelines below to deploy Identity Server in production. In addition to this, see Production Deployment Guidelines.

...

...

Changing the default keystore

1. Open <IS_HOME>/repository/conf/carbon.xml file.
2. The private key is used for the HTTPS channel and for the token issuer to sign the issued tokens. 

...

<!--
      Security configurations
     -->
    <Security>
        <!--
            KeyStore which will be used for encrypting/decrypting passwords
            and other sensitive information.
        -->
        <KeyStore>
            <!-- Keystore file location-->
            <Location>${carbon.home}/repository/resources/security/wso2carbon.jks</Location>
            <!-- Keystore type (JKS/PKCS12 etc.)-->
            <Type>JKS</Type>
            <!-- Keystore password-->
            <Password>wso2carbon</Password>
            <!-- Private Key alias-->
            <KeyAlias>wso2carbon</KeyAlias>
            <!-- Private Key password-->
            <KeyPassword>wso2carbon</KeyPassword>
        </KeyStore>

        <!--
           The directory under which all other KeyStore files will be stored
        -->
        <KeyStoresDir>${carbon.home}/repository/resources/security</KeyStoresDir>
    </Security>

Changing the host name

1. Open <IS_HOME>/repository/conf/carbon.xml file.

2. Change the host names of the Identity Provider to match the "Common Name" of the certificate of the private key.

   Code Block

   <!-- Host name or IP address of the machine hosting this server e.g. www.wso2.org, 192.168.1.10 This is will become part of the End Point Reference of the services deployed on this server instance. --> <HostName>localhost</HostName> <!-- Host name to be used for the Carbon management console --> <MgtHostName>localhost</MgtHostName> <!-- The URL of the back end server. This is where the admin services are hosted and will be used by the clients in the front end server. This is required only for the Front-end server. This is used when seperating BE server from FE server --> <ServerURL>local:/${carbon.context}/services/</ServerURL>

Changing the HTTP/HTTPS ports

• Open <IS_HOME>/repository/conf/tomcat/catalina-server.xml file and change the HTTP and HTTPS ports in the <connector> elements.

  Code Block
  language html/xml
  <Connector protocol="org.apache.coyote.http11.Http11NioProtocol" port="9763" ... /> <Connector protocol="org.apache.coyote.http11.Http11NioProtocol" port="9443 scheme="https" ... />

Configuring Security

After you install WSO2 IS, it is recommended to change the default security settings according to the requirements of your production environment.

• For more information on this area, see Configuring Security that is under the product administration guide. 
• For more information on the product administration settings and recommendations, see the Product Administration guide.